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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

LISTING OF CLAIMS: 

1 . (Original) A method for identifying the source of an event in a computer 
network, comprising the steps of: 

associating an identifier tag with an event occurring within the computer 
network, wherein the identifier tag uniquely identifies at least one collection computer 
monitoring the event; 

receiving, in at least one management computer, information from the at least 
one collection computer that includes the identifier tag; 

deriving, by the at least one management computer, an identification of each 
collection computer from the identifier tag; and 

identifying to a user the source of the event using the identification of each 
collection computer. 

2. (Original) The method of claim 1 , wherein the identifier tag is a name 
of the at least one collection computer. 

3. (Original) The method of claim 1 , wherein the step of deriving 
comprises the step of: 

maintaining within the at least one management computer a database of 
identification information associated with identifier tags. 
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4. (Original) The method of claim 1 , wherein the step of identifying 
comprises the step of: 

displaying to the user the identification of the at least one collection computer 
and a network address of a network element that generated the event. 

5. (Original) The method of claim 1 , wherein the step of identifying 
comprises the step of: 

mapping each collection computer to a group of collection computers using 
the identifier tag; and 

identifying to the user the source of the event using the group of collection 
computers and a network address of a network element that generated the event. 

6. (Currently Amended) The method of claim 1 , further comprising the 
steps of: 

managing, by the collection computer, at least one network object; and 
resolving, by the collection computer, a network address of each network 

object into a resolved network address included in the information received at the at 

least one management computer. 

7. (Original) A system for identifying the source of an event in a computer 
network, comprising: 
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a plurality of collection computers, wherein an identifier tag uniquely identifies 
each collection computer, and wherein the identifier tag is associated with an event 
occurring within the computer network; 

at least one management computer for receiving information from the plurality 
of collection computers that includes the identifier tag, wherein each management 
computer derives an identification of each collection computer from the identifier tag; 
and 

means for identifying to a user the source of the event using the identification 
of each collection computer. 



